PT-2026-20918 · Unknown · Open-Webui

Gg0H · CVE-2026-26193 · Published 2026-02-19 · Updated 2026-07-13

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.6.44

Description Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Manually modifying chat history allows setting the embeds property on a response message. The content of this property is loaded into an iFrame with a sandbox that has allow-scripts and allow-same-origin set, bypassing the "iframe Sandbox Allow Same Origin" configuration. This enables stored cross-site scripting (XSS) on the affected chat, and the resulting malicious link can be shared with other users on the instance. The issue occurs when the chat is in the shared format.

Recommendations Update to version 0.6.44 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-26193

GHSA-VJM7-M4XH-7WRC

PYSEC-2026-2760

Affected Products

Open-Webui

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/26xxx/CVE-2026-26193.json · Exploit
• https://github.com/open-webui/open-webui/security/advisories/GHSA-vjm7-m4xh-7wrc · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-2760 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vjm7-m4xh-7wrc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-26193 · Security Note
• https://osv.dev/vulnerability/CVE-2026-26193 · Vendor Advisory
• https://github.com/open-webui/open-webui · Note
• https://github.com/open-webui/open-webui/blob/6f1486ffd0cb288d0e21f41845361924e0d742b3/src/lib/components/chat/Messages/ResponseMessage.svelte#L689-L703 · Note
• https://github.com/advisories/GHSA-vjm7-m4xh-7wrc · Note
• https://twitter.com/TomarPrateek23/status/2030501417648361888 · Twitter Post
• https://twitter.com/Prateektomar/status/2033543939865936092 · Twitter Post
• https://pypi.org/project/open-webui · Note
• https://twitter.com/Prateektomar/status/2034268685138067815 · Twitter Post
• https://twitter.com/Prateektomar/status/2033906302762815653 · Twitter Post
• https://twitter.com/CVEnew/status/2025809097455759494 · Twitter Post